Skip to main content

Nexus Repository 3 CVE-2026-77121

| EUVDEUVD-2026-70232 MEDIUM
Allocation of Resources Without Limits or Throttling (CWE-770)
2026-09-02 Sonatype GHSA-747h-p664-p8p7
Denial Of Service Nexus Repository 3 Sonatype
5.3
CVSS 4.0 · Vendor: Sonatype
Share

Severity by source

Vendor (Sonatype) PRIMARY
5.3 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
4.3 MEDIUM

Network-exploitable requiring only low privileges (deploy permission); availability impact is partial and bounded to one repository, so A:L and S:U.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (Sonatype).

CVSS VectorVendor: Sonatype

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Sep 02, 2026 - 17:48 vuln.today
CVE Published
Sep 02, 2026 - 17:03 cve.org
MEDIUM 5.3

DescriptionCVE.org

A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected.

AnalysisAI

Targeted repository denial-of-service in Sonatype Nexus Repository 3 allows any authenticated user holding deploy privileges to permanently disable component browsing on a specific hosted Maven repository. Uploading a crafted POM file with an oversized metadata field (CWE-770) corrupts the repository's internal data such that subsequent listing and browse operations fail indefinitely until an administrator repairs the underlying record. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must hold an authenticated Nexus Repository 3 account with deploy permissions on at least one hosted Maven repository - a credential level typically granted to CI/CD service accounts, developers, or build automation tokens. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Real-world risk is moderate and narrowly scoped. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation The primary fix is to upgrade Sonatype Nexus Repository 3 to version 3.95.0 or later, as documented in the vendor release notes (https://help.sonatype.com/en/sonatype-nexus-repository-3-95-0-release-notes.html) and the support advisory (https://support.sonatype.com/hc/en-us/articles/54635665756691/). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Nexus Repository 3

View all
CVE-2026-17594 HIGH POC
8.2 Aug 07

Incorrect authorization in the Nexus Repository 3 CE/Pro repository-creation UI allows an authenticated user with a form
CVE-2026-17601 HIGH
8.9 Aug 07

Privilege escalation in Sonatype Nexus Repository 3 allows an authenticated low-privileged user - who holds the 'update

CVE-2026-17603 HIGH
8.7 Aug 07

Remote code execution in Sonatype Nexus Repository 3 is achievable by any user holding the nx-datastores-update permissi
CVE-2026-17600 HIGH
8.7 Aug 07

Insufficient session expiration in Sonatype Nexus Repository 3 allows a previously-authenticated user to retain full rep
CVE-2026-14644 HIGH
8.6 Aug 07

Privilege escalation in Sonatype Nexus Repository 3 allows an authenticated user holding privilege-management rights to

CVE-2026-14504 HIGH
8.2 Jul 14

Authorization bypass in Sonatype Nexus Repository 3's component upload API lets an account holding only read/browse priv
CVE-2026-77124 HIGH
7.5 Sep 02

Script execution enforcement failure in Sonatype Nexus Repository 3 allows privileged authenticated users to invoke pre-
CVE-2026-77125 HIGH
7.1 Sep 02

Incorrect authorization in Sonatype Nexus Repository 3 allows a low-privileged user holding the `nexus:blobstores:create
CVE-2026-17599 MEDIUM
6.9 Aug 07

Unverified password change in Sonatype Nexus Repository 3 allows any account holding the nexus:* permission to overwrite
CVE-2026-17596 MEDIUM
6.3 Aug 07

Stored XSS in Sonatype Nexus Repository 3 enables an authenticated user holding blob store management permissions to inj
CVE-2026-77123 MEDIUM
6.0 Sep 02

The webhook shared secret stored in Nexus Repository 3's capability configuration is returned unmasked via the capabilit
CVE-2026-17595 MEDIUM
5.3 Aug 07

JEXL expression sandbox bypass in Sonatype Nexus Repository 3's Content Selector feature allows authenticated users hold

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all
CVE-2017-8779 HIGH POC
7.5
CVE-2025-53521 CRITICAL POC
9.3
CVE-2017-5850 HIGH POC
7.5
CVE-2025-26682 HIGH
7.5
CVE-2025-41770 HIGH
8.7
CVE-2025-26466 MEDIUM
5.9
CVE-2020-37067 CRITICAL POC
9.8
CVE-2021-47875 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2026-77121 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy